Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/uSxyC5p1LzFocZL_XSBl8zeh0yg.roa
File: uSxyC5p1LzFocZL_XSBl8zeh0yg.roa (raw, json)
Hash identifier: zYJeQSQ3Bb4u+MNLkMaVaYTlv5YIpnhYpjXWLaWwK80=
Subject key identifier: B9:2C:72:0B:9A:75:2F:31:68:71:92:FF:5D:20:65:F3:37:A1:D3:28
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01A05C28FCFED880F98FB138C319643C53C9
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/uSxyC5p1LzFocZL_XSBl8zeh0yg.roa
Signing time: Tue 01 Sep 2026 08:49:44 +0000
ROA not before: Tue 01 Sep 2026 08:49:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206273
IP address blocks: 188.119.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:28:fc:fe:d8:80:f9:8f:b1:38:c3:19:64:3c:53:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Sep 1 08:49:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b92c720b9a752f31687192ff5d2065f337a1d328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:df:68:a0:57:04:16:53:8c:ad:64:0b:93:
05:0b:f7:6e:39:9a:98:6e:e0:a7:7f:fa:26:2a:88:
82:d9:86:46:a0:92:84:f1:1a:09:6a:8b:39:70:75:
97:b6:7c:30:d0:ef:37:af:0f:51:f5:b9:2c:55:8b:
93:07:3b:1c:2c:aa:ff:60:a6:f7:92:a2:40:66:39:
0e:d0:bc:85:5d:8e:ed:75:80:21:10:3c:6d:ab:3d:
d1:6d:90:c8:9f:73:42:88:ea:95:2e:d4:ad:01:33:
af:d3:8b:e7:a6:43:73:be:e9:cf:58:52:e9:3a:74:
35:9b:ca:d0:be:73:03:4d:cd:d1:5a:b6:81:19:d7:
aa:f4:23:27:63:32:04:7b:5e:55:c7:6d:bf:7a:aa:
d4:c9:a6:ae:98:27:e5:d7:30:f3:10:b7:78:fe:d8:
b9:a9:62:4d:18:66:b5:6d:30:7e:af:40:52:a5:e2:
3e:97:ae:65:43:fc:97:e2:f3:a0:39:e3:83:e4:ee:
ad:e2:57:d6:37:d3:ab:4a:e4:7a:fe:24:ae:36:00:
f9:c4:fd:8b:db:e1:de:a4:d6:69:c9:27:c5:de:55:
83:c8:ab:a9:29:bb:bc:c0:3c:6a:c0:42:1b:05:9c:
74:a3:5e:9d:2a:9d:7d:98:1f:5e:bf:fb:83:81:ad:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2C:72:0B:9A:75:2F:31:68:71:92:FF:5D:20:65:F3:37:A1:D3:28
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/uSxyC5p1LzFocZL_XSBl8zeh0yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.156.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:07:17:d8:4c:d5:88:58:b7:35:17:74:bd:4d:2e:9c:bb:07:
a7:0d:18:6b:aa:49:e7:28:80:73:bf:60:1f:bb:a3:7d:f9:b0:
9d:0c:7e:f1:9d:14:fb:47:0f:c2:12:81:a4:a4:f0:09:8a:c7:
a8:c8:93:49:e2:b5:01:36:a2:0e:66:84:1f:b3:08:53:19:ea:
be:b9:7d:d0:d2:7a:ce:b4:ab:4b:f1:42:e6:31:c1:e6:df:1f:
b5:9d:02:a4:16:5c:8e:eb:7d:55:ed:50:3c:c2:42:b2:cc:5c:
89:ee:c2:e4:60:a8:79:a8:0c:e5:b5:aa:75:c6:32:18:92:5a:
2e:95:5d:c3:dc:4b:89:9f:39:19:dd:47:22:9b:95:2f:cb:e3:
f7:3c:6d:b1:13:2c:d9:23:65:6b:43:8b:56:0e:64:00:27:f6:
d2:d0:8e:84:c2:b9:1a:ac:d0:b0:27:c8:35:74:55:96:a2:87:
bb:04:db:50:25:ca:ac:a8:32:cc:95:15:a0:93:0a:7e:f4:25:
d2:da:fd:14:54:07:70:b3:ac:bf:93:d1:4f:a7:50:2e:ba:4b:
c9:6e:24:d6:a9:e3:75:61:7f:df:41:ef:3f:cb:04:ce:9d:47:
ef:ae:d7:1e:1e:35:2e:7e:63:6b:7d:e9:1a:d3:ec:48:06:53:
92:f5:2b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:17:29 2026 by rpki-client